Informativa Privacy
•
PERSONAL DATA PROTECTION NOTICE
Pursuant to art. 13 of EU Regulation 2016/679
In accordance with the provisions under art. 13 of EU Regulation 2016/679, GSC Holding S.r.l., in its capacity as Data controller, and in the person of its legal representative pro tempore, hereby informs customers and suppliers about the purposes and methods of processing of the personal data collected, their communication and transmission area and the nature of their supply.
1) PURPOSES
The data collected from customers and suppliers shall be processed and used directly for the following purposes:
1. Performance of the activity
2. Management
3. Storage
4. Invoicing
5. Processing
6. Provision of services/products
In accordance with the principles of fairness, lawfulness, scope and proportionality and with legal provisions.
2) METHODS
Data processing shall be computerised/electronic or paper-based and shall be carried out by designated internal parties. The data shall be stored in paper, computerised and electronic archives. Minimal safety measures shall be guaranteed, as required by the law.
3) DATA COMMUNICATION AND/OR TRANSMISSION
Personal, accounting and tax data shall not be communicated to, sold to or exchanged with third parties, except for notifications to third parties for the execution of functional activities, such as administrative, accounting and tax formalities, and marketing activities, and except when necessary for the fulfilment of the obligations by the parties. In this case, data use by third parties shall be made in accordance with the principle of fairness and pursuant to the provisions of the law.
No data shall be transferred to extra-EU countries.
4) MISSING OR INCORRECT DATA NOTIFICATION
The Data controller hereby informs that any missing or incorrect notification of any of the compulsory details shall prevent the Data Controller from guaranteeing that the data processing is carried out in accordance with the relevant contractual agreements.
5) RIGHTS OF THE PERSON CONCERNED
The person concerned may exercise his/her rights as per art. 15, 16, 17 and 21 of EU Regulation 2016/679 by addressing the Data controller, GSC Holding S.r.l., or the Data processor. In particular, the person concerned may obtain confirmation about the existence of personal data about him/her, even when these have not yet been registered, and may obtain their notification in an intelligible form.
The person concerned has the right to be informed about:
a) the origin of the personal data;
b) the purposes and methods of processing;
c) the logic behind the processing of data by electronic means;
d) the identification details of the Data controller, processors and designated representative pursuant to art. 5, par.2;
e) the subjects or subject categories to whom personal data may be communicated or who might get to know said data in their capacity as designated representative on the national territory, processors or parties in charge.
The person concerned has the right to:
a) have personal data updated, corrected or integrated, when necessary;
b) have personal data removed, made anonymous or blocked, when the data are processed against the law, including data that do not need to be stored for the purposes for which they were collected or processed;
c) receive confirmation that the operations under letters a) and b), including their content, have been notified to the people to whom the data were communicated or transmitted, except when such notification is impossible or requires the use of means that are disproportionate compared to the right to be protected.
The person concerned has the right to object to, partially or fully:
a) the processing of personal data about him/her on legitimate grounds, even when the data are relevant to the purposes of the data collection;
b) the processing of personal data about him/her for the purposes of sending advertising or direct marketing material or carrying out market research or promotion.
In order to exercise his/her rights under art. 15, 16, 17 and 21 of EU Regulation 2016/679, the person concerned shall write to info@sunbell.it or to the address Via I maggio 44/46, 25038 Rovato (BS) Italy, for the attention of the Data processor.
6) DATA CONTROLLER AND PROCESSORS
GSC Holding S.r.l. is the Data controller. The updated list of external data processors may be consulted by addressing a written request to the above-mentioned Data controller.
7) STORAGE LIMITATION
The data shall be stored as long as necessary to carry out the accounting and tax formalities in accordance with the law, and no longer than 10 years from the termination of the established relationship.
8) NATURE OF THE SUPPLY AND CONSEQUENCES OF A REFUSAL TO ANSWER
Pursuant to art. 6 of EU Regulation 2016/679, data supply is compulsory for paragraphs 1-6 since said data are collected to comply with a legal obligation or for the fulfilment of contractual obligations. Refusal to provide such details shall prevent data processing, and result in the termination of all relationships.
